RE: RE: Full-disclosure Digest, Vol 8, Issue 48

["Martijn Lievaart" <m () rtij nl>]

> > The virus scanner determined the type of the file by
> > the header and it failed. That's bad news. I am
> > wondering however, when I execute that file, how does
> > the OS process the file? I guess my question is, if I
> > have a modified version of a virus, with whatever
> > header, if I try to execute that file, will the virus
> > code get executed?
>
> Lets see, do you think this would be executed?
> -------------------------------------------------------
> MZ%Nihilist%
> %Nihilist%@echo off
> %Nihilist%set num=0

(snip)

Hihi, clamav cought that... :-]

M4


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/